Devices are controlled by a secured, real time, bi-directional connection to the device. There is no need to change inbound firewall rules. Linux or Windows edge devices can be used. The Ardexa agent (which runs on the edge device) will receive a message in real time to run a command on the edge device. The Ardexa agent will then execute the command, and send the results back to the cloud. All requests to run commands are logged in the cloud, along with the user who requested the command be executed and whether the command was a success or failure.
The REMOTE SHELL functionality in the cloud allows you to run commands on the edge device. See the article on the REMOTE SHELL here.